Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eLGVH-huMc8rapx-zBQol7W6wbs.roa
File: eLGVH-huMc8rapx-zBQol7W6wbs.roa (raw, json)
Hash identifier: dBq0SVYODoTbT9noZtho2o8DhkqOnGRrlJMatl/O+48=
Subject key identifier: 78:B1:95:1F:E8:6E:31:CF:2B:6A:9C:7E:CC:14:28:97:B5:BA:C1:BB
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 0194984B697557A6AB14CB0F3354E0505A95
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eLGVH-huMc8rapx-zBQol7W6wbs.roa
Signing time: Fri 24 Jan 2025 12:31:06 +0000
ROA not before: Fri 24 Jan 2025 12:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198457
IP address blocks: 2001:678:1004::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:4b:69:75:57:a6:ab:14:cb:0f:33:54:e0:50:5a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Jan 24 12:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78b1951fe86e31cf2b6a9c7ecc142897b5bac1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:14:6e:26:84:45:07:67:c1:67:11:f2:63:
b7:e0:20:b6:57:d7:52:04:3b:6d:7a:f7:b7:0d:52:
b9:01:e4:03:a3:10:10:a5:95:bc:54:52:39:9d:b9:
f1:3d:20:6b:c0:20:67:3b:5d:d3:23:5c:a2:c4:a5:
28:dc:5d:ab:50:f6:1d:08:c0:15:6f:50:a8:3c:8b:
4e:e1:bb:5e:1d:bc:9f:f6:2c:aa:53:a6:c1:2a:71:
bd:b9:ed:55:f8:3c:12:e0:66:48:d9:81:ef:34:1b:
1e:24:a0:7c:68:9b:bc:ef:a0:33:09:69:5b:6f:62:
8e:90:43:a8:d4:5d:01:ac:95:bf:f2:a1:c4:0b:4d:
5f:42:d3:26:30:15:a2:c5:c8:84:93:81:0f:47:18:
3a:72:4a:60:1e:03:2f:c9:7f:05:06:3f:51:92:44:
da:65:3a:dc:7c:b3:65:1c:70:12:2e:e2:11:43:86:
b9:e3:2e:b0:76:b7:34:61:b4:06:d2:54:c6:62:30:
6c:5d:41:23:bb:14:4c:14:2d:71:6f:da:26:dc:3f:
80:9a:3e:94:a4:99:1a:8c:79:63:1e:aa:9f:fe:b3:
90:35:19:5a:67:c0:f5:02:a1:58:1c:e8:e5:83:c7:
ec:8d:58:8c:d7:0d:54:78:5f:de:bb:7b:9b:e9:6e:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B1:95:1F:E8:6E:31:CF:2B:6A:9C:7E:CC:14:28:97:B5:BA:C1:BB
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eLGVH-huMc8rapx-zBQol7W6wbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1004::/48
Signature Algorithm: sha256WithRSAEncryption
d8:67:86:dd:89:4e:28:17:82:99:88:49:e5:69:6e:1c:50:c5:
e6:d7:d6:11:47:77:ff:ea:dd:87:c2:69:c8:b9:27:5b:ef:94:
01:a4:33:32:65:35:7c:ed:3c:eb:16:b8:30:63:06:3d:87:13:
94:a9:56:77:3a:cb:f0:e7:00:2f:07:ff:3e:c3:53:c1:68:43:
86:76:78:80:4f:e8:98:6d:a4:10:32:f1:66:56:89:70:21:58:
70:24:77:6c:e1:f4:db:99:78:a2:3f:56:28:49:f2:b6:1f:fc:
a5:16:4a:c2:70:da:86:d4:1e:f1:a2:88:66:5f:df:a9:70:63:
d6:b3:e8:b4:d6:3a:9d:60:80:f7:8d:40:0d:3a:16:19:9c:4d:
e5:d9:9a:04:bb:8a:69:1d:2d:7a:df:8c:7a:de:1c:9c:ac:13:
88:d7:2e:5e:98:f3:73:b3:b8:56:41:83:f4:45:04:f4:09:65:
e1:ed:f9:01:29:f7:43:cb:6b:fb:25:8b:5e:07:36:91:7c:a2:
10:7f:17:7f:80:85:97:c9:f4:7e:22:34:2c:2a:62:c7:4e:34:
25:e2:45:31:40:d7:87:e5:97:64:8c:25:2d:11:80:d0:59:4a:
55:74:29:57:c0:7a:33:31:20:40:ea:91:a7:b8:e3:5c:8c:9d:
0b:d6:a9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:53:06 2025 by rpki-client